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WE CLAIM; 

1. A method of processing data with one or more data processing threads 
5 executing under control of a first operating system and one or more data processing 
threads executing under control of a second operating system, said method comprising 
the steps of: 

executing a first data processing thread under control of said first operating 

system; 

10 receiving a first interrupt operable to suspend execution of said first data 

processing thread at a first thread exit point and to trigger interrupt processing under 
control of said second operating system; 

executing interrupt handing code under control of said second operating 

system; 

15 generating a retum interrupt; 

determining a retum data processing thread to be executed under control of 
said first operating system; 

executing retum interrupt handling code under control of said first operating 
system, said retum interrupt handling code being operable such that: 
20 (i) if said retum data processing thread is said first data processing thread, then 

said first data processing thread is resumed at said first thread exit point; and 

(ii) if said retum data processing thread is a second data processing thread 
different fi-om said first data processing thread, then a thread switching operation is 
performed under control of said first operating system to save context data associated 
25 with said first data processing thread at said first thread exit point such that said first 
data processing thread may later be resumed from said first thread exit point and to 
trigger execution of a second data processing thread under control of said first 
operating system. 

30 2. A method as claimed in claim 1, wherein said first operating system executes 
in a secure domain and said second operating system executes in a non-secure 
domain, wherein a data processing thread executing in said secure domain has access 
to secure data which is not accessible to a data processing thread executing in said 
non-secure domain. 
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3. A method as claimed in claim 1, wherein said return interrupt is a software 
simulated interrupt. 

5 4. A method as claimed in claim 3, wherein said software simulated interrupt 
includes a branch instruction triggering a branch in program execution flow to said 
return interrupt handling code. 

5. A method as claimed in claim 1, wherein said retum interrupt specifies one or 
10 more of: 

a data processing thread executing under control of said second operating 
system when said retum interrupt was generated; and 
one or more parameter values. 

15 6. A method as claimed in claim 1, wherein switches between processing under 
control of said first operating system and processing under control of said second 
operating system take place via a monitor mode of operation executing a monitor 
mode program. 

20 7. A method as claimed in claim 1, wherein triggering execution of said second 
data processing thread is one of: 

starting execution of said second data processing thread as new data 

processing thread; and 

resuming execution of said second data processing thread following an earlier 
25 suspension of said second data processing thread. 

8. Apparatus for processing data with one or more data processing threads 
executing imder control of a first operating system and one or more data processing 
threads executing under control of a second operating system, said apparatus 
30 comprising: 

execution logic operable to execute a first data processing thread under control 
of said first operating system; 
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interrupt receiving logic operable to receive a first interrupt and suspend 
execution of said first data processing thread at a first thread exit point and to trigger 
interrupt processing under control of said second operating system; 

interrupt handling execution logic operable to execute interrupt handing code 
5 under control of said second operating system; 

a retum interrupt generator operable to generate a return interrupt; 

retum data processing thread determining logic operable to determine a retum 
data processing thread to be executed under control of said first operating system; 

retum intermpt handling code execution logic operable to execute retum 
10 interrupt handling code under control of said first operating system, said retum 
interrupt handling code being operable such that: 

(i) if said retum data processing thread is said first data processing thread, then 
said first data processing thread is resumed at said first thread exit point; and 

(ii) if said retum data processing thread is a second data processing thread 
15 different firom said first data processing thread, then a thread switching operation is 

performed under control of said first operating system to save context data associated 
with said first data processing thread at said first thread exit point such that said first 
data processing thread may later be resumed firom said first thread exit point and to 
trigger execution of a second data processing thread under control of said first 
20 operating system. 

9. Apparatus as claimed in claim 8, wherein said first operating system executes 
in a secure domain and said second operating system executes in a non-secure 
domain, wherein a data processing thread executing in said secure domain has access 

25 to secure data which is not accessible to a data processing thread executing in said 
non-secure domain. 

10. Apparatus as claimed in claim 8, wherein said return intermpt is a software 
simulated intermpt. 

30 

11. Apparatus as claimed in claim 10, wherein said software simulated intermpt 
includes a branch instmction triggering a branch in program execution flow to said 
retum intermpt handling code. 
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12. Apparatus as claimed in claim 8, wherein said retum interrupt specifies one or 
more of: 

a data processing thread executing under control of said second operating 
system when said retum interrupt was generated; and 
5 one or more parameter values. 

13. Apparatus as claimed in claim 8, wherein switches between processing under 
control of said first operating system and processing under control of said second 
operating system take place via a monitor mode of operation executing a monitor 

10 mode program. 

14. Apparatus as claimed in claim 8, wherein triggering execution of said second 
data processing thread is one of: 

starting execution of said second data processing thread as new data 
15 processing thread; and 

resuming execution of said second data processing thread following an earlier 
suspension of said second data processing thread. 

15. A computer program product having a computer program operable to control a 
20 data processing apparatus in accordance with a method as claimed in claim 1. 
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